Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/nXL-byir1KMXIyk3HbD2MHln_No.roa
File: nXL-byir1KMXIyk3HbD2MHln_No.roa (raw, json)
Hash identifier: A/OD6KySnQX5IixsrzhckS6ydj/C7bP0Fdv4GBj3Y2w=
Subject key identifier: 9D:72:FE:6F:28:AB:D4:A3:17:23:29:37:1D:B0:F6:30:79:67:FC:DA
Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial: 0198005DDF5326C63D714B04A191C6199113
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/nXL-byir1KMXIyk3HbD2MHln_No.roa
Signing time: Sat 12 Jul 2025 20:40:08 +0000
ROA not before: Sat 12 Jul 2025 20:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25090
IP address blocks: 193.8.222.0/23 maxlen: 23
194.56.96.0/22 maxlen: 24
194.56.98.0/23 maxlen: 24
194.56.112.0/22 maxlen: 24
194.56.112.0/23 maxlen: 23
194.56.116.0/22 maxlen: 24
194.56.118.0/23 maxlen: 24
194.56.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Jul 2025 07:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:00:5d:df:53:26:c6:3d:71:4b:04:a1:91:c6:19:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Validity
Not Before: Jul 12 20:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d72fe6f28abd4a3172329371db0f6307967fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:82:03:ec:7e:27:7a:4a:58:e7:85:6a:d6:
8e:4f:b5:3c:f7:9a:6b:37:3f:13:58:4c:cb:0d:26:
3b:7c:95:45:4e:05:74:17:89:c2:09:a9:08:00:a2:
fa:9f:27:45:ee:c5:d0:f7:47:24:ae:7a:42:c8:0c:
f4:02:85:72:1d:4e:1a:79:70:fd:51:1a:ce:0d:8c:
fb:ba:f9:c8:a5:c4:9b:f8:8d:cc:62:6c:ae:f8:a5:
bd:bf:d1:8c:80:9f:12:c9:5d:5d:49:c0:45:dd:16:
bf:db:fa:ef:dc:2a:89:32:25:1c:1e:58:bc:be:b7:
f8:dd:70:e4:05:eb:e1:c7:92:d3:8e:dc:f3:80:7d:
4f:30:1d:e5:bd:d9:67:33:37:38:aa:e8:34:8e:0a:
30:da:58:7c:7a:13:14:d2:ca:83:f5:65:86:df:6b:
ef:79:77:07:ba:b3:28:eb:5a:11:1d:b5:32:cd:84:
42:1b:af:b4:33:9a:95:22:bd:ea:05:55:46:87:a9:
fc:c8:12:0c:c8:1e:32:83:3a:b8:71:e7:61:a4:29:
dd:e7:a6:20:b9:b3:db:77:2e:40:ba:df:2d:d9:75:
39:73:1d:25:ba:d1:b7:1a:5a:91:bf:f8:75:5f:1d:
17:bd:bf:b9:d6:9b:e9:71:39:52:6d:5e:e2:b7:a8:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:FE:6F:28:AB:D4:A3:17:23:29:37:1D:B0:F6:30:79:67:FC:DA
X509v3 Authority Key Identifier:
keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/nXL-byir1KMXIyk3HbD2MHln_No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.222.0/23
194.56.96.0/22
194.56.112.0-194.56.123.255
Signature Algorithm: sha256WithRSAEncryption
3d:ed:6e:cd:4a:dc:2c:6d:dc:5f:b0:52:da:b2:0f:c8:1d:52:
60:76:62:41:78:8e:a1:20:58:9f:8b:78:f8:aa:15:29:75:ef:
fa:59:a8:c1:a7:e6:5b:e5:34:67:d6:b6:55:52:d0:12:df:38:
02:8a:6c:55:7e:29:7a:fc:6f:9e:69:1a:9f:97:10:24:12:a0:
03:be:37:3f:f7:a6:f9:70:29:e9:8a:ae:ed:75:9b:af:d8:d0:
d9:14:64:7d:ff:81:7e:bc:b0:61:ea:0d:6e:1c:92:9e:0b:60:
2e:de:55:16:a0:19:d4:32:94:7f:01:3c:54:60:db:96:d3:15:
05:3e:6f:07:9d:6c:24:cc:ea:fa:1c:7c:93:fd:90:62:96:d1:
49:28:51:98:f0:e6:e4:ba:59:fd:85:ad:d1:6e:aa:35:b1:d0:
e6:80:ff:d5:26:ef:92:fe:22:8e:43:83:dc:b9:d1:28:42:04:
e3:8d:ec:91:c6:a5:9b:62:62:50:f5:d1:01:21:be:82:c6:63:
4d:b8:42:52:9c:9f:fd:45:b0:87:0f:97:fd:a1:45:39:00:55:
2d:48:83:33:a9:9e:24:cd:4f:75:ab:c7:a3:93:09:5a:ac:bf:
af:57:d5:31:36:ff:60:54:53:30:42:17:9e:70:29:c8:ce:91:
20:c4:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:01 2025 by rpki-client